CDM Regulations Health and Safety File: Expert Guide 2026
- 2 days ago
- 12 min read
The job's finished. The contractor has left site. Finance wants the final account closed. Facilities wants the drawings. Your maintenance team wants to know where the new isolators are. Then the handover folder lands in your inbox and it's either a random dump of PDFs or there's no usable health and safety file at all.
That's where a lot of project managers, estates leads, and business owners get caught out. The build may be complete, but the risk hasn't gone anywhere. It's just moved to the next person who has to drill into a wall, access rooftop plant, alter fire-stopping, or bring in a contractor for a later refit.
In smaller organisations, this problem is often worse, not better. A gym rollout, a retail refresh, or a theatre fit-out may not feel like “major construction”, so teams treat the paperwork lightly. But future works still happen. Ceiling voids still hide services. Roofs still have fragile areas. Refurbishments still disturb hazardous materials. If the file is vague, generic, or missing, the next job starts blind.
A good CDM health and safety file isn't a bureaucratic extra. It's part of safe building ownership. It helps later designers, contractors, and facilities teams understand what was built, what changed, and what risks remain. That's why it sits firmly inside the wider discipline of occupational health and safety management, not just project close-out admin.
The practical challenge is proportionality. A new leisure centre and a small retail fit-out don't need the same volume of information. They do need the same discipline. The file must be accurate, relevant, and usable by the next person doing work on the asset.
Table of Contents
What Is a CDM Health and Safety File - Purpose over paperwork - Who the file is really for
What Exactly Goes into the Health and Safety File - Think future works, not project history - What belongs and what does not
The Health and Safety File Lifecycle From Start to Finish - Who does what during the project - What happens after handover
A Practical Checklist for Assembling Your File - A working method for SMEs and multi-site teams - How to keep it proportionate
Common Mistakes to Avoid with Your CDM File - Why files fail in practice - What poor handover looks like on site
How KODOBI Ensures Your CDM Compliance - Support that fits the way SMEs run projects - Why this matters beyond one project
Introduction Navigating Your Post-Project Handover
A facilities manager at a multi-site business usually doesn't ask for much at handover. They want to know what changed, where the services run, what can't safely be cut or loaded, and what future contractors need to know before they start work. That sounds simple. In practice, they're often handed hundreds of files with no logic behind them.
One common example is a fit-out pack that contains warranties, meeting notes, old revisions, and generic RAMS, but no clear record of residual risk. Another is a refurbishment where everyone assumes the O&M manuals are enough, until a later contractor needs to know whether a ceiling void contains new electrical routes, old asbestos risk information, or fire compartment changes.
A useless file is often worse than no file at all, because teams assume the answer must be in there somewhere.
For SMEs, especially those running gyms, shops, venues, and small estates portfolios, the operational consequences show up quickly:
Reactive maintenance slows down: Engineers spend time tracing services and checking what was installed.
Future works become riskier: Contractors make assumptions because nobody can show them reliable as-built information.
Compliance reviews get awkward: Senior managers believe the handover is complete, but key legal records are incomplete or inaccessible.
Knowledge walks out the door: If one project manager or contractor held everything in email, the organisation loses that knowledge after the project closes.
The practical fix starts earlier than generally assumed. The CDM regulations health and safety file should be planned while the design is still live, updated during construction, and handed over in a form the client can maintain.
That matters just as much on a three-storey office refurbishment as it does on a branded chain of smaller refits. The scale changes. The principle doesn't.
What Is a CDM Health and Safety File
The simplest way to explain the CDM regulations health and safety file is this. It's the building's safety record for future construction work. Not a complete archive. Not a box-ticking bundle. A focused record of the information someone will need later to work safely on, in, or around the structure.
Under CDM 2015, a health and safety file is required on any project involving more than one contractor, regardless of project duration. The Health and Safety Executive indicates that this now applies to over 90% of all UK construction projects because the trigger is broad and based on contractor involvement rather than the old notifiable threshold, as set out by the Health and Safety Executive overview of CDM duties.
Purpose over paperwork
If you treat the file as a project close-out folder, it becomes bloated and ignored. If you treat it as a practical tool for the next contractor, it becomes useful.
That difference matters. The file is meant to help with future maintenance, cleaning involving construction risk, refurbishment, alteration, and eventual demolition. It should tell the next duty holder what hazards remain after the job is done and what's unusual about the finished asset.
For example, on a theatre refit that might mean documenting altered access routes above stage areas, concealed electrical changes, fragile ceiling zones, or new plant lifting arrangements. On a gym project, it may be roof access controls, service routes above changing areas, fixed equipment affecting floor loadings, or fire-stopping changes in studio partitions.
A short explainer is worth watching if you need a quick visual summary before getting into the detail.
Who the file is really for
People often ask whether the file is “for the client” or “for the principal designer”. Legally, it's prepared and maintained through the project by the principal designer. Practically, it exists for whoever needs to plan safe future work.
That includes:
Clients and asset owners who inherit the record
Facilities teams who need reliable reference information
Future designers assessing constraints and residual risks
Maintenance and refurbishment contractors planning method statements and access
Demolition teams much later in the structure's life
Practical rule: If a future contractor would need the information to avoid guesswork, it probably belongs in the file.
That's why good files are concise, indexed, and specific. They don't try to prove the original project was well run. They help the next project start safely.
What Exactly Goes into the Health and Safety File
The legal test is relevance and proportionality. Under CDM 2015, the file must contain information about significant residual health and safety risks that may be needed in future work. Typical inclusions are as-built drawings, key structural principles, and hazardous materials information. It should exclude temporary construction-phase documents such as the construction phase plan and individual contractor RAMS, as stated in Regulation 12 of CDM 2015.
Think future works, not project history
That phrase solves most arguments.
A file works when every item answers one question: what does the next person need to know to work safely on this structure? If a document doesn't help answer that, leave it somewhere else.
Useful content usually includes a brief description of the completed works, critical as-built drawings, information on structural limitations, locations of significant services, and records of hazardous materials or contamination findings that remain relevant. On some projects it should also identify special maintenance access measures, fragile roofs, harness anchor points, fire-fighting services, or dismantling requirements for major plant.
What doesn't work is dumping every drawing revision, every subcontractor record, every site inspection sheet, and every risk assessment into one folder. That creates noise. The important information gets buried.
What belongs and what does not
Include in the File Do | Exclude from the File Don't |
|---|---|
As-built drawings showing actual service routes, hidden voids, and access arrangements | Construction phase plan kept for the original project only |
Structural principles such as safe working loads for floors or roofs | Individual contractor RAMS prepared for temporary site tasks |
Hazardous materials information such as asbestos survey findings, lead paint details, or contamination data that remains relevant | Generic health and safety policies that don't describe the finished asset |
Location of significant services including gas, electrical, drainage, fire-fighting, and isolation points where relevant | Commercial or contractual records such as orders, valuations, and correspondence |
Residual risks that were not designed out and still affect later work | Full meeting minutes unless a specific point is needed elsewhere in the file |
Special maintenance or cleaning precautions such as fragile surfaces or safe removal arrangements for large units | Old superseded drawing packs with no as-built value |
A practical way to judge content is to group it into three working categories:
What the next contractor can't see: concealed services, hidden structural changes, buried elements, enclosed voids.
What the next contractor might wrongly assume: load capacity, access method, fire-stopping continuity, isolation arrangements.
What can hurt people later if omitted: hazardous materials, fragile materials, residual structural risk, unusual plant removal issues.
Keep the file lean enough that a contractor will read it, but rich enough that they won't have to guess.
That balance is the heart of proportionality.
The Health and Safety File Lifecycle From Start to Finish
The health and safety file should move through the project in the same way the design and build information does. It isn't something to assemble in a rush at practical completion. Regulation 12(5) requires the principal designer to prepare it and ensure it is reviewed and updated through the project. It's a live record reflecting as-built conditions, and the client then has to maintain it for the life of the structure, as outlined in the NBS explanation of the health and safety file.
Who does what during the project
The principal designer owns the coordination task. That means setting the file structure early, identifying what information will be needed, and chasing the design and construction team for the right inputs.
The principal contractor and trade contractors contribute key information, especially where the work departs from design intent or uncovers site conditions that matter later. That might include revised service routes, discovered contamination, changed access arrangements, or details needed to remove installed plant safely.
For project managers, the working discipline is straightforward:
Start early: Put the file on the project tracker from the beginning, not the end.
Assign information owners: Structural engineer for loading data, MEP designer for service layouts, contractor for as-built changes, specialist for hazardous materials findings.
Review during progress meetings: Not every week in depth, but often enough that missing information doesn't become a final-week panic.
Check the built reality: If site changes were made, the file must show what was built.
A broader view of duty holder coordination sits within health and safety in construction practice, but the file is one of the clearest tests of whether that coordination has happened.
What happens after handover
The client's duty doesn't end when the PDF arrives.
Once the project completes, the client must keep the file available and update it when later works make it inaccurate. In multi-site businesses, such situations frequently lead to system failures. One project closes. Another team handles minor works six months later. Nobody updates the original file. After a few years, the record no longer matches the asset.
That's why the handover process needs three clear controls:
A named document owner inside the client organisation
A fixed storage location that facilities and authorised contractors can access
An update trigger whenever structural, service, or hazardous-material changes are made
The best handover isn't the biggest folder. It's the one the client can still use and update three years later.
A Practical Checklist for Assembling Your File
For SMEs and multi-site operators, proportionality is the difficult part. Official guidance tells you the file must be appropriate to the project. It doesn't tell a gym operator exactly what that looks like across repeated refurbishments. One practical response is to use standardised core templates for recurring project types, which reflects an emerging approach described in Praxis42's discussion of proportional health and safety files.
A working method for SMEs and multi-site teams
A file assembly process works best when it is boring, repeatable, and easy to audit.
Use a checklist like this:
Set a core template first: Build one structure for recurring work types such as retail refits, studio refurbishments, or back-of-house upgrades.
Define mandatory sections: Project summary, residual risks, services, structure, hazardous materials, access and maintenance, as-built drawings.
Map document sources early: Don't wait for handover. Decide who supplies what and in what format.
Separate the HSF from O&M manuals: Cross-reference where useful, but don't merge everything into one giant operations folder.
Carry out a relevance review: Remove anything that only relates to temporary construction management.
Store the approved version centrally: SharePoint, a common data environment, BIM-linked document register, or a controlled CMMS record can all work if access is clear.
If you're auditing your wider arrangements at the same time, a structured health and safety audit checklist for employers helps identify where project records, contractor controls, and facilities information are drifting apart.
How to keep it proportionate
A minor fit-out file shouldn't look like a hospital redevelopment file. But it also shouldn't be one page saying “no significant risks”.
Use practical filters.
For a small office or retail refurbishment, focus tightly on what changed: concealed services, fire compartment alterations, fixed plant, structural penetrations, access constraints, and any hazardous materials information. Keep narrative short. Use marked-up drawings where possible.
For a programme of repeat works across multiple sites, create a standard pack with site-specific appendices. The core pack can set out recurring equipment types, standard access methods, and file governance rules. The site appendix should only capture what is unique to that location and project.
For a more complex venue or mixed-use asset, build a fuller file with indexed plans, specialist surveys, and maintenance-risk information where future contractors will rely on it.
What fails is false efficiency. Teams either over-document every small job or under-document repeated works because each one seems minor in isolation. The better approach is consistency in format, selectivity in content.
Common Mistakes to Avoid with Your CDM File
Health and safety file failures remain a regular enforcement issue under CDM. They are consistently identified among the top five CDM-related breaches and account for approximately 15 to 20% of all CDM enforcement activities, which is why experienced teams treat file quality as a serious compliance checkpoint rather than a paperwork afterthought.
Why files fail in practice
The first failure is starting too late. If the principal designer only asks for file content near completion, they'll receive rushed, inconsistent information. Contractors will send document bundles instead of edited inputs because nobody set expectations earlier.
The second is producing a generic file. You can spot these immediately. Generic cover page. Generic section headings. Generic statements that could belong to any building. They often contain plenty of words and very little usable information.
The third is failing to update for as-built conditions. A design drawing says one thing. Site changes say another. Future contractors act on the drawing and meet something different on site.
Common root causes include:
Poor ownership: Nobody knows who is collecting and reviewing file inputs.
Confusion with O&M manuals: Teams assume handover manuals cover the same duty when they don't.
Document dumping: The file becomes a storage location instead of a risk communication tool.
Weak client governance: After handover, later alterations happen with no update process.
If the file doesn't reflect what was actually built, it can't protect the next contractor.
What poor handover looks like on site
Poor files rarely show up as a legal issue first. They show up as practical disruption.
A maintenance contractor arrives to replace a unit and cannot confirm safe removal arrangements. A fit-out team opens a ceiling and finds service routes that aren't shown anywhere reliable. A later designer spends time commissioning new surveys because the existing records can't be trusted.
Those delays cost time, but the more important issue is decision quality. When teams lack clear residual-risk information, they substitute assumptions. That's exactly what the file is meant to prevent.
A strong review before handover should ask:
Can a future contractor find key information quickly?
Does the file identify what is unusual, concealed, or hazardous?
Does it exclude routine project clutter?
Is there a clear owner on the client side after completion?
If any answer is no, the handover isn't finished.
How KODOBI Ensures Your CDM Compliance
KODOBI works with organisations that don't have the luxury of a large in-house compliance team dedicated to construction documentation. That includes gyms, retail businesses, theatres, offices, and mixed portfolios where projects are frequent enough to create risk, but not always large enough to justify a permanent specialist resource.
The practical value is in making the file proportionate and manageable. That means reviewing whether an existing health and safety file is legally fit for purpose, helping teams define a usable structure, and aligning project documentation with the way the client operates sites after handover.
Support that fits the way SMEs run projects
Many smaller and mid-sized businesses don't need theory. They need someone to look at their estate, their contractors, and their project pipeline and decide what good looks like in practice.
KODOBI supports that by helping clients:
Design proportionate documentation systems for projects ranging from one-off refurbishments to repeat rollouts
Carry out compliance reviews and audits against current UK duties and practical site realities
Improve internal ownership between HR, facilities, operations, and project teams
Train managers and responsible persons so handover information is understood and maintained, not just filed away
That matters when projects touch several business functions. A CDM file might be created by external designers, received by a project manager, stored by facilities, and relied on later by procurement or operations teams appointing maintenance contractors. If those handoffs are weak, the duty becomes fragile.
Why this matters beyond one project
The best outcome isn't a single compliant file. It's a repeatable system.
For organisations with multiple sites, that usually means a standard file template, a clear naming convention, a central storage rule, and a defined update trigger when later works change the asset. KODOBI's broader service model is built around those operational realities, with sector-specific support for construction, fitness, retail, theatres, hospitality, education, and other UK employers that need workable compliance, not overbuilt paperwork.
That combination of advisory support, auditing, and training is often what turns CDM duties from a recurring handover problem into a stable part of normal business management.
If your team is juggling refurbishments, fit-outs, maintenance works, or multi-site project handovers and you need a CDM health and safety file process that's compliant and practical, speak to KODOBI. They can help you review what you already have, build proportionate systems for future projects, and train the people who'll need to maintain them.
Comments